Our pass rate is high to 98.9% and the similarity percentage between our ccie 400 101 dumps study guide and real exam is 90% based on our seven-year educating experience. Do you want achievements in the Cisco 400 101 dumps exam in just one try? I am currently studying for the Cisco ccie 400 101 dumps exam. Latest Cisco ccie 400 101 dumps Test exam practice questions and answers, Try Cisco 400 101 dumps Brain Dumps First.
♥♥ 2021 NEW RECOMMEND ♥♥
Free VCE & PDF File for Cisco 400-101 Real Exam (Full Version!)
★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions
Free Instant Download NEW 400-101 Exam Dumps (PDF & VCE):
Available on:
http://www.surepassexam.com/400-101-exam-dumps.html
Q381. Which two conditions must be met by default to implement the BGP multipath feature? (Choose two.)
A. The next-hop routers must be the same.
B. Route reflectors must be enabled.
C. All attributes must have the same values.
D. MPLS must be enabled.
E. The next-hop routers must be different.
Answer: C,E
Q382. Refer to the exhibit.
R3 prefers the path through R1 to reach host 10.1.1.1.
Which option describes the reason for this behavior?
A. The OSPF reference bandwidth is too small to account for the higher speed links through R2.
B. The default OSPF cost through R1 is less than the cost through R2.
C. The default OSPF cost through R1 is more than the cost through R2.
D. The link between R2 and R1 is congested.
Answer: A
Explanation:
The default formula to calculate OSPF bandwidth is BW = Bandwidth Reference / interface
bandwidth [bps] = 10^8 / / interface bandwidth [bps]
BW of the R1-R3 link = 10^8 / 100Mbps = 10^8 / 10^8 = 1
BW of the R2-R3 link = 10^8 / 1Gbps = 10^8 / 10^9 = 1 (round up)
Therefore OSPF considers the two above links have the same Bandwidth -> R3 will go to 10.1.1.1 via the R1-R3 link. The solution here is to increase the Bandwidth Reference to a higher value using the “auto-cost reference-bandwidth” command under OSPF router mode. For example: Router(config)#router ospf 1 Router(config-router)#auto-cost reference-bandwidth 10000 This will increase the reference bandwidth to 10000 Mbps which increases the BW of the R2-R3 link to 10^10 / 10^8 = 100.
Q383. Which three features are considered part of the IPv6 first-hop security suite? (Choose three.)
A. DNS guard
B. destination guard
C. DHCP guard
D. ICMP guard
E. RA guard
F. DoS guard
Answer: B,C,E
Explanation:
Cisco IOS has (at least) these IPv6 first-hop security features: IPv6 RA Guard rejects fake RA messages coming from host (non-router) ports (not sure whether it handles all possible IPv6 header fragmentation attacks). Interestingly, it can also validate the contents of RA messages (configuration flags, list of prefixes) received through router-facing ports, potentially giving you a safeguard against an attack of fat fingers. DHCPv6 Guard blocks DHCPv6 messages coming from unauthorized DHCPv6 servers and relays. Like IPv6 RA Guard it also validates the DHCPv6 replies coming from authorized DHCPv6 servers, potentially providing protection against DHCPv6 server misconfiguration. IPv6 Snooping and device tracking builds a IPv6 First-Hop Security Binding Table (nicer name for ND table) by monitoring DHCPv6 and ND messages as well as regular IPv6 traffic. The binding table can be used to stop ND spoofing (in IPv4 world we’d call this feature DHCP Snooping and Dynamic ARP Inspection). IPv6 Source Guard uses the IPv6 First-Hop Security Binding Table to drop traffic from unknown sources or bogus IPv6 addresses not in the binding table. The switch also tries to recover from lost address information, querying DHCPv6 server or using IPv6 neighbor discovery to verify the source IPv6 address after dropping the offending packet(s). IPv6 Prefix Guard is denies illegal off-subnet traffic. It uses information gleaned from RA messages and IA_PD option of DHCPv6 replies (delegated prefixes) to build the table of valid prefixes. IPv6 Destination Guard drops IPv6 traffic sent to directly connected destination addresses not in IPv6 First-Hop Security Binding Table, effectively stopping ND exhaustion attacks.
Reference: http://blog.ipspace.net/2013/07/first-hop-ipv6-security-features-in.html
Q384. Refer to the exhibit.
What happens to packets when traffic in the icmp-class class exceeds the policed amount?
A. Packets are discarded and a message is logged.
B. Packets are discarded and a trap is sent to any servers that are configured to receive traps.
C. Packets are discarded silently.
D. Packets are discarded and an inform is sent to any servers that are configured to receive informs.
Answer: C
Explanation:
service-policy {input| output policy-map-name Example:
Router(config-cp)# service-policy input control-plane-policy
Attaches a QoS service policy to the control plane. Note the following points:
. input --Applies the specified service policy to packets received on the control plane.
. output --Applies the specified service policy to packets transmitted from the control plane and enables the router to silently discard packets.
. policy-map-name --Name of a service policy map (created using the policy-mapcommand) to be attached. The name can be a maximum of 40 alphanumeric characters.
In this case, the service policy is set to output, which drops the traffic silently per above.
Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_plcshp/configuration/15-mt/qos-plcshp-15-mt-book/qos-plcshp-ctrl-pln-plc.html
Q385. Refer to the exhibit.
The two standalone chassis are unable to convert into a VSS. What can you do to correct the problem?
A. Set a different port channel number on each chassis.
B. Set a different virtual domain ID on each chassis.
C. Set the redundancy mode to rpr on both chassis.
D. Add two ports to the port channel group.
Answer: A
Q386. Which two statements about the BGP community attribute are true? (Choose two.)
A. Routers send the community attribute to all BGP neighbors automatically.
B. A router can change a received community attribute before advertising it to peers.
C. It is a well-known, discretionary BGP attribute.
D. It is an optional transitive BGP attribute.
E. A prefix can support only one community attribute.
Answer: B,D
Explanation:
A community is a group of prefixes that share some common property and can be configured with the BGP community attribute. The BGP Community attribute is an optional transitive attribute of variable length. The attribute consists of a set of four octet values that specify a community. The community attribute values are encoded with an Autonomous System (AS) number in the first two octets, with the remaining two octets defined by the AS. A prefix can have more than one community attribute. A BGP speaker that sees multiple community attributes in a prefix can act based on one, some or all the attributes. A router has the option to add or modify a community attribute before the router passes the attribute on to other peers.
Reference:
http://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/28784-bgp-community.html
Q387. Refer to the exhibit.
Two multicast domains are configured as shown and connected with MSDP, but the two
domains are unable to communicate. Which two actions can you take to correct the problem? (Choose two.)
A. Change the peering IP address in AS 65220 to 10.0.0.20.
B. Change the peering AS on R2 to 65210.
C. Verify that UDP port 639 is open.
D. Verify that TCP port 139 is open.
E. Change the MSDP originator-id to GigabitEthernet 0/0/0 on both routers.
F. Change the MSDP peering IP address on R2 to 172.16.1.13.
Answer: A,B
Q388. Refer to the exhibit.
Which two actions can you take to enable CE-1 at site A to access the Internet? (Choose two.)
A. Create a default route for site A on PE-1 with the next hop set to the PE-2 interface to the Internet.
B. Originate a default route in site B with the next hop set to the PE-2 Internet interface, and import the default route into site A.
C. Create a default route on CE-1 with the next hop set to the PE-1 upstream interface.
D. Originate a default route in site A with the next hop set to the PE-2 interface to CE-1.
E. Create a static default route on CE-1 with the next hop set to the PE-2 interface to the Internet.
Answer: A,B
Q389. Which two statements about the metric-style wide statement as it applies to route redistribution are true? (Choose two.)
A. It is used in IS-IS.
B. It is used in OSPF.
C. It is used in EIGRP.
D. It is used for accepting TLV.
E. It is used in PIM for accepting mroutes.
F. It is used for accepting external routes.
Answer: A,D
Explanation:
To configure a router running IS-IS to generate and accept only new-style TLVs (TLV stands for type, length, and value object), use the metric-style wide command.
Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/TE_1208S.html#wp49409
Q390. Refer to the exhibit.
Your network is suffering excessive output drops. Which two actions can you take to resolve the problem? (Choose two.)
A. Install a switch with larger buffers.
B. Configure a different queue set.
C. Reconfigure the switch buffers.
D. Configure the server application to use TCP.
E. Update the server operating system.
Answer: A,B
Explanation:
Installing a switch with larger buffers and correctly configuring the buffers can solve output queue problems.
For each queue we need to configure the assigned buffers. The buffer is like the ‘storage’ space for the interface and we have to divide it among the different queues. This is how to do it:
mls qos queue-set output <queue set> buffers Q1 Q2 Q3 Q4
In this example, there is nothing hitting queue 2 or queue 3 so they are not being utilized.